Talk: Update on Landlock (2026)

📢 This is the recording of the “Update on Landlock talk” that Mickaël Salaün and me gave at the Linux Security Summit Europe in Prague. It gives an update on Landlock development over the past two years and reflects our current thinking about the direction of the project: 🌍 Talk page | 🎥 Video on YouTube Talk Summary Landlock gained a few interesting features to restrict more operations. We’ll explain unix socket restrictions, signal scoping, thread synchronization support, and UDP control. We’ll also walk through some lesser known Linux features that make such restrictions sometimes challenging to properly handle. Finally, we’ll talk about ongoing developments and the roadmap. I also found these other Landlock-related talks from the Open Source Summit and Linux Security Summit interesting: Speaker Title Category Tingmao Wang libturnstile: Unprivileged Interactive Sandboxing from Seccomp-unotify to Landlock Supervise Landlock Feature Cong Wang Sandlock: Rootless and Containerless…

Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town